Categories: PUA

About “PUP.Optional.PriceFountain” infection

The PUP.Optional.PriceFountain is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.PriceFountain virus can do?

Unconventionial language used in binary resources: Hebrew
Authenticode signature is invalid
Checks the version of Bios, possibly for anti-virtualization
Checks the CPU name from registry, possibly for anti-virtualization
Collects information to fingerprint the system

How to determine PUP.Optional.PriceFountain?


File Info:
name: D166281BE5D7D92421FB.mlwpath: /opt/CAPEv2/storage/binaries/2330b7db6a350c1261c672589ae204b35fb62506bed8a11c888950d4dca5750ccrc32: 2F798174md5: d166281be5d7d92421fb7b8e590ef7bcsha1: 7e4899729724888b875ebcdce4c60c6d6a26f388sha256: 2330b7db6a350c1261c672589ae204b35fb62506bed8a11c888950d4dca5750csha512: d730d8332b47ecd3c28d05f17026f7b930413dc39e8f1955d2175ab19d416c907c4f809e3a636c49a983ccc950f0d6cd90eb5ef8d52c3012b6986457f6b38be7ssdeep: 6144:O5LrRcskPd8Uz3WmyqyFSEZ+xiTvrltDmARO9VF/6Q4jQeKoJ:KRcskPdb3yFS8MiTv32VF/fLoJtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T115745A01B281E071D8BE01B46A38AB77153EBE518BE6C9D7E38448AD4D701D19FB3B67sha3_384: 25154e383ba3fd74a81b6ab1cba2595369dea915dd952a84b718549f25b9d31d92c9740fb516df0529beb47dfc0ae431ep_bytes: 558bec837d0c017505e8cd9e0000ff75timestamp: 2015-12-12 22:15:33
Version Info:
FileVersion: 1.1.0.9InternalName: prfo.dllLegalCopyright: Copyright (C) 2014OriginalFilename: prfo.dllProductVersion: 1.1.0.9Translation: 0x0009 0x04b0

PUP.Optional.PriceFountain also known as:

Lionic	Adware.Win32.Generic.2!c
DrWeb	Adware.DealPly.260
MicroWorld-eScan	Gen:Variant.Adware.PriceFountain.1
FireEye	Generic.mg.d166281be5d7d924
CAT-QuickHeal	PUP.PriceFountain.D5
Skyhigh	PUP-FGA
ALYac	Gen:Variant.Adware.PriceFountain.1
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_100% (D)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Arcabit	Trojan.Adware.PriceFountain.1
BitDefenderTheta	Gen:NN.ZedlaF.36680.vu8@aWVH5JiO
Symantec	Adware.DealPly
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/DealPly.CI potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	not-a-virus:UDS:AdWare.Win32.DealPly.heur
BitDefender	Gen:Variant.Adware.PriceFountain.1
NANO-Antivirus	Virus.Win32.Gen.ccmw
SUPERAntiSpyware	PUP.PriceFountain/Variant
Avast	Win32:BrowseFox-AIE [Adw]
Tencent	Malware.Win32.Gencirc.10b0e710
Emsisoft	Gen:Variant.Adware.PriceFountain.1 (B)
F-Secure	Heuristic.HEUR/AGEN.1302012
VIPRE	Gen:Variant.Adware.PriceFountain.1
TrendMicro	ADW_DEALPLY.SMCI
Sophos	PriceFountain (PUA)
Webroot	Pua.Adware.Pricefountain
Varist	W32/S-ed781133!Eldorado
Avira	HEUR/AGEN.1302012
Antiy-AVL	GrayWare[AdWare]/Win32.DealPly.ci
Xcitium	Application.Win32.DealPly.E@6765lz
Microsoft	BrowserModifier:Win32/Prifou
ZoneAlarm	not-a-virus:UDS:AdWare.Win32.DealPly.heur
GData	Win32.Adware.DealPly.S
Google	Detected
AhnLab-V3	PUP/Win32.Dealply.R174855
McAfee	PUP-FGA
MAX	malware (ai score=67)
VBA32	BScope.Adware.DealPly
Malwarebytes	PUP.Optional.PriceFountain
TrendMicro-HouseCall	ADW_DEALPLY.SMCI
Rising	Adware.DealPly!1.A3EF (CLASSIC)
Yandex	PUA.DealPly!NlYgi8w/ejc
Ikarus	PUA.DealPly
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/DealPly
AVG	Win32:BrowseFox-AIE [Adw]
DeepInstinct	MALICIOUS